CLAIMS 

I CLAIM: 

1. A software virus detection method, comprising the steps of: 

- interpreting code; 

- writing the results of said interpretation; 

- scanning the results of said interpretation for the presence of proscribed code. 

2. A method as in claim 1 wherein the step of scanning further comprising a first 
scanning step for the presence of code of interest. 

3. A method as in claim 2 wherein the first scanning step for the presence of code of 
interest further comprises scanning for a file open command or a file modify command. 

4. A method as in claim 2 wherein the step of scanning further comprising a second 
scanning step for the presence of proscribed code of interest. 

5. A method as in claim 4 wherein the second scanning step for the presence of 
proscribed code of interest further comprises scanning for viral code or viral patterns. 

6. A software virus detection article of manufacture comprising: 

- a computer readable medium; and, 

- a table of interpreted results, comprising interpreted proscribed code. 



7. A software virus detection apparatus, comprising: 

- a code interpreter; 

- a pattern analyzer; 

- a results evaluator; 

- a reporter; 

whereby, after proscribed code is interpreted by said interpreter and results generated, 
those results are reviewed by said pattern analyzer for the presence of proscribed code, 
and results reported to said results evaluator, and from said results evaluator to a reporter. 

8. An apparatus as in claim 7 wherein said code interpreter further reviews said code for 
the presence of code of interest. 

9. An apparatus as in claim 8 wherein said code interpreter further reviews said code for 
the presence of a file open command or a file modify command. 

10. An apparatus as in claim 9 wherein said pattern analyzer further reviews said code 
for the presence of code of interest. 

1 1 . An apparatus as in claim 1 0 wherein said pattern analyzer further reviews said code 
for the presence of proscribed code. 

12. An apparatus as in claim 1 1 wherein said pattern analyzer further reviews said code 
for the presence of viral code or viral patterns. 



